What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromisetranslating…

TL;DR: The containment clock starts immediately after a developer's laptop is compromised, an infostealer fires an alert, a device goes missing, or a dependency turns malicious. While important, EDR and incident response only tell you what happened on the machine, like which…

Sign in to join the discussion.

Loading comments…